Categories: Virus

Virus.MSIL.Lamer.2 removal

The Virus.MSIL.Lamer.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus.MSIL.Lamer.2 virus can do?

A file was accessed within the Public folder.
Uses Windows utilities for basic functionality
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
Deletes executed files from disk
Touches a file containing cookies, possibly for information gathering
Uses csc.exe C# compiler to build and execute code
Uses suspicious command line tools or Windows utilities

How to determine Virus.MSIL.Lamer.2?


File Info:
name: 4D5320409FFD32DB7C10.mlwpath: /opt/CAPEv2/storage/binaries/da0b90799022174e0fd6acebdeec1ce9220e58eea5729ba583e4edf6842f4d1bcrc32: F78F1000md5: 4d5320409ffd32db7c102e936360481dsha1: f3a5ff4d4ba4e84c0c5d7a8b30faa2b3b428afe7sha256: da0b90799022174e0fd6acebdeec1ce9220e58eea5729ba583e4edf6842f4d1bsha512: b91b4378c139a88f7b0f6b4b974cd11d42283a5f5e9c8c03c191ca927188fa5e66c4f777138bee8a17067edbbc5c3ef27a7e419935365b621f9a5cc39e43bcb8ssdeep: 1536:UpCwFu9EP1kVR4Lrc6qO88D7UsMROhb2TaPhJpS3EbfnKUweR1:WNFu9EP1kVR4Lrc6qO88D7UsMROhb2Twtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12D93D79538DEE112E3F33FBBC94056F30E6B76527DA842C8A915038AC1D7E42EDB8915sha3_384: b5c19360f5d14a555e291cc8f1b56ab6eccfd93eb5ab76818fe5ea9ae8fb65a893fb3a1a67041306e30839374bf2ae58ep_bytes: ff250020400000000000000000000000timestamp: 2023-09-04 15:30:40
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: bngdxzz471.exeLegalCopyright:  OriginalFilename: bngdxzz471.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Virus.MSIL.Lamer.2 also known as:

Lionic	Virus.Win32.Lamer.n!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.95085
CAT-QuickHeal	W32.Ribaj.D3
McAfee	GenericRXFP-WC!4D5320409FFD
Malwarebytes	MachineLearning/Anomalous.100%
VIPRE	Trojan.GenericKDZ.95085
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00533b581 )
Alibaba	Trojan:MSIL/Ribaj.e5bc6a2f
K7GW	Trojan ( 00533b581 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/MSIL_Ribaj.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Ribaj.D
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Virus.MSIL.Lamer.gen
BitDefender	Trojan.GenericKDZ.95085
NANO-Antivirus	Trojan.Win32.Ribaj.fdpxxq
Avast	Win32:TrojanX-gen [Trj]
Sophos	MSIL/Ribaj-B
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	Trojan.DownLoader26.49007
TrendMicro	TROJ_GEN.R002C0DI423
McAfee-GW-Edition	BehavesLike.Win32.Generic.mz
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.4d5320409ffd32db
Emsisoft	Trojan.GenericKDZ.95085 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKDZ.95085
Avira	TR/Dropper.MSIL.Gen
MAX	malware (ai score=82)
Antiy-AVL	Trojan/MSIL.Ribaj.b
Kingsoft	malware.kb.c.1000
Xcitium	Virus.MSIL.Ribaj.E@7ovh2l
Arcabit	Trojan.Generic.D1736D
ZoneAlarm	HEUR:Virus.MSIL.Lamer.gen
Microsoft	Trojan:MSIL/Ribaj.A
Google	Detected
BitDefenderTheta	Gen:NN.ZemsilF.36738.fm0@aiNO98b
ALYac	Trojan.GenericKDZ.95085
VBA32	Virus.MSIL.Lamer.2
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DI423
Tencent	Msil.Virus.Ribaj.Fmnw
Ikarus	Virus.MSIL.Ribaj
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Ribaj.D
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.d4ba4e
DeepInstinct	MALICIOUS